This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json) Hash identifier: mK9wH8dpFA9PFmCoBW8P7PkGhvykioy/RjU65KMfO2o= Subject key identifier: DF:B0:BC:FD:C3:8A:F4:8E:41:3C:15:F2:47:F6:DD:30:10:00:8A:29 Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a Certificate serial: 019AF276E4E2F5FEF91006B46EF3CE1BCBDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft Manifest number: 0E7E Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: fMVs8tbwrlPtRNg1a3JLVyucOs6ugfhWkzSpoQmXvLw=) 2: E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa (hash: U3UIBvBEgw3rK3s+0sDC6RFjCDwgftn5pIAbSSrZ/Fw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e4:e2:f5:fe:f9:10:06:b4:6e:f3:ce:1b:cb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=dfb0bcfdc38af48e413c15f247f6dd3010008a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:a9:d3:f1:c0:92:16:c2:00:29:cf:b5:82: a4:68:ac:45:5e:66:89:1c:e3:24:1b:1b:40:42:03: 6f:c4:19:bd:2e:3a:4c:ff:bf:5a:b5:5b:91:b3:fa: 4e:90:dd:c5:c0:fa:a6:81:4c:2d:88:73:66:34:6e: 9e:4c:06:ab:8c:e1:7f:e0:f3:52:a8:8f:61:33:e7: b1:c2:6d:63:0e:74:38:19:b9:47:8c:1b:d6:93:11: 9a:1a:1c:b4:bd:cc:45:c2:c6:61:67:5b:6f:1d:3a: 09:58:36:29:2e:ff:6c:3d:9e:21:17:b5:00:4c:6b: ad:5f:85:a6:da:4f:5b:44:50:fc:29:41:b0:d0:ec: fb:80:f6:73:a9:14:02:27:25:fd:9e:58:3b:ee:1f: 1f:34:c4:72:87:40:9b:7b:f0:98:16:d2:e2:0b:d4: 91:6e:a0:53:ba:56:72:fc:e4:fe:73:dd:f1:56:f8: a4:5a:11:6f:13:c0:7b:9e:0b:5c:ea:1d:3e:92:3d: 99:64:f4:40:26:15:b5:ab:97:8b:35:e1:74:64:bd: 28:77:ab:99:65:1b:bf:e6:a1:fb:bd:9e:cf:04:09: 8a:95:51:1e:c0:9f:1a:73:8e:b3:f1:9e:c2:f8:73: 6b:b2:31:b8:cf:da:c9:0c:ba:55:03:a3:eb:8e:66: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B0:BC:FD:C3:8A:F4:8E:41:3C:15:F2:47:F6:DD:30:10:00:8A:29 X509v3 Authority Key Identifier: keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b6:98:7f:94:fe:bf:14:d0:bb:9d:d9:e9:d8:8a:5a:2f:d1: f1:dc:03:ce:39:46:0e:19:6a:d3:dc:c9:53:e9:42:98:11:f4: 8b:4b:48:b3:6c:59:e3:5b:68:b5:b4:1e:09:8b:d8:35:ff:d7: 21:60:e9:eb:ad:09:18:0d:22:13:68:ac:7f:de:b1:48:21:77: 69:2c:e8:6e:d0:71:b3:b7:e5:c9:d3:8d:d9:39:3c:5c:0a:b6: dd:5e:13:1e:2f:d5:98:c5:df:86:cf:44:04:85:4f:72:fd:f2: 12:31:3e:18:60:ef:65:a4:cf:bd:4c:d5:d9:4f:88:de:95:f7: c3:85:66:40:8b:3a:4b:2f:66:87:38:56:46:3a:b3:f0:1d:2c: 9b:fb:b4:b7:da:40:13:2c:b5:85:60:58:89:5a:ae:8e:61:fc: da:84:74:45:87:5d:a2:39:01:e1:79:53:18:2c:15:52:bb:57: 8b:58:ee:5a:02:e5:1d:9e:cf:4c:74:26:68:b5:03:50:f7:d8: 59:e2:81:e5:d3:be:80:52:06:c8:f0:3b:aa:90:1c:db:0c:c9: 46:39:b6:2c:74:aa:28:a0:23:61:c0:31:42:aa:ec:01:20:6b: 22:3c:26:e8:5d:da:4d:bd:a4:34:bd:1e:a0:50:1b:59:fd:35: e7:bb:fd:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduTi9f75EAa0bvPOG8vbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTY1YjgzZDIxMzE1ZjhiYTc1NzhlODhiZGYzODEzMjk1 ZGRlMGEwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD EyhkZmIwYmNmZGMzOGFmNDhlNDEzYzE1ZjI0N2Y2ZGQzMDEwMDA4YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpup0/HAkhbCACnPtYKkaKxFXmaJ HOMkGxtAQgNvxBm9LjpM/79atVuRs/pOkN3FwPqmgUwtiHNmNG6eTAarjOF/4PNS qI9hM+exwm1jDnQ4GblHjBvWkxGaGhy0vcxFwsZhZ1tvHToJWDYpLv9sPZ4hF7UA TGutX4Wm2k9bRFD8KUGw0Oz7gPZzqRQCJyX9nlg77h8fNMRyh0Cbe/CYFtLiC9SR bqBTulZy/OT+c93xVvikWhFvE8B7ngtc6h0+kj2ZZPRAJhW1q5eLNeF0ZL0od6uZ ZRu/5qH7vZ7PBAmKlVEewJ8ac46z8Z7C+HNrsjG4z9rJDLpVA6PrjmbRtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+wvP3DivSOQTwV8kf23TAQAIopMB8GA1UdIwQY MBaAFATmW4PSExX4unV46IvfOBMpXd4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjct M2U3ODFkYzFlN2U5LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjctM2U3ODFkYzFlN2U5 LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbaYf5T+ vxTQu53Z6diKWi/R8dwDzjlGDhlq09zJU+lCmBH0i0tIs2xZ41totbQeCYvYNf/X IWDp660JGA0iE2isf96xSCF3aSzobtBxs7flydON2Tk8XAq23V4THi/VmMXfhs9E BIVPcv3yEjE+GGDvZaTPvUzV2U+I3pX3w4VmQIs6Sy9mhzhWRjqz8B0sm/u0t9pA Eyy1hWBYiVqujmH82oR0RYddojkB4XlTGCwVUrtXi1juWgLlHZ7PTHQmaLUDUPfY WeKB5dO+gFIGyPA7qpAc2wzJRjm2LHSqKKAjYcAxQqrsASBrIjwm6F3aTb2kNL0e oFAbWf0157v9Eg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:48 2025 by rpki-client